Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: yUXViUK726mhaKV71YZnXpTvs8lIRmrSYY2fsQNtmKY=
Subject key identifier: A8:F5:43:85:39:CE:2C:BF:9F:B1:F9:16:94:E4:E2:3D:4D:DB:B3:DD
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 0199FAD8186EF0154A68D8E06DD18E893B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 0A81
Signing time: Sun 19 Oct 2025 05:01:29 +0000
Manifest this update: Sun 19 Oct 2025 05:01:29 +0000
Manifest next update: Mon 20 Oct 2025 05:01:29 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: Xn0HoeDjNNeVmJxkEpvp0x0KogWIJBtrKdyyCAK0mI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:18:6e:f0:15:4a:68:d8:e0:6d:d1:8e:89:3b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: Oct 19 05:01:29 2025 GMT
Not After : Oct 20 05:01:29 2025 GMT
Subject: CN=a8f5438539ce2cbf9fb1f91694e4e23d4ddbb3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:f6:f6:54:ff:8d:7b:e4:11:a4:a9:cc:68:
a4:74:08:8e:fa:94:53:66:f6:f6:45:74:95:92:c5:
13:c2:c0:4b:b6:28:5f:f5:a8:1c:df:8b:05:6d:58:
7b:b1:67:70:e1:24:92:51:60:e3:b7:21:03:46:32:
03:fc:ee:52:54:a6:8c:98:1d:8e:a1:e3:0a:ed:42:
a2:a0:31:50:e9:f1:22:ed:20:a5:dd:15:a2:d6:80:
1c:e4:63:ee:c4:01:e6:13:9f:f8:41:fb:81:0e:61:
38:89:e8:8b:c1:e2:bf:eb:2f:60:2f:16:64:79:aa:
30:24:d5:f3:51:9e:10:65:2b:10:6b:33:93:4d:ab:
82:10:31:f6:89:64:b6:51:be:d3:e6:40:7c:36:b9:
0e:5c:b9:bd:98:e6:70:45:f8:32:3a:d0:2e:d3:13:
04:22:18:9b:0f:ea:a8:f1:95:0d:15:4f:9b:37:fd:
0d:06:1e:9e:1f:53:03:ec:02:0c:16:65:6c:c0:4f:
ca:78:f4:c3:e0:f6:9f:55:5d:d9:ce:59:e4:76:96:
4d:86:33:68:98:64:b2:43:75:b3:02:b0:d0:20:c1:
77:0c:46:b5:c4:bf:d3:ea:fc:d1:4b:48:89:1c:ac:
42:31:0a:34:40:c8:7d:2a:c5:e1:01:3e:5b:5e:3f:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F5:43:85:39:CE:2C:BF:9F:B1:F9:16:94:E4:E2:3D:4D:DB:B3:DD
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:47:b6:4b:3f:cd:e5:d2:a6:57:14:65:53:2a:a9:3a:1f:57:
2c:48:9f:be:17:d5:77:f9:a4:b5:ec:41:64:0b:82:37:35:ac:
70:0e:fc:7e:ae:33:b0:02:bb:7c:1a:1a:bb:94:52:bb:96:ef:
c5:7d:f9:98:9c:08:98:ac:2b:27:60:b8:d3:a9:40:22:1f:77:
28:b4:03:12:22:75:dd:50:fb:c2:8e:7c:c8:f8:a2:a7:8f:5e:
1e:b9:8b:b3:17:fb:27:c1:16:a1:44:2f:89:8f:53:e8:60:b4:
2e:c2:40:9d:e3:08:90:3e:e3:e7:c4:0a:e4:65:9e:eb:9d:66:
11:60:61:89:2d:02:9f:11:92:c8:7b:9c:47:73:e4:2f:47:31:
61:e7:c6:0f:7f:00:66:a0:50:41:6f:e3:c4:05:1d:56:2c:e5:
c7:49:e9:cf:d6:b6:24:b2:32:74:ee:e1:be:d9:d0:96:3e:63:
b2:bc:5f:be:36:11:ab:7e:29:6a:70:a8:19:0c:66:64:46:b2:
43:0d:c4:de:44:a0:f4:7a:b5:b0:f1:83:f8:77:94:05:3e:61:
9f:97:72:74:bf:48:b8:89:68:fd:bd:dd:e8:ff:19:9b:3f:b6:
44:0c:66:b1:65:40:7f:74:36:26:7e:32:18:70:1c:b1:77:9e:
b2:0f:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:10 2025 by rpki-client